$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa File: 5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa (raw, json) Hash identifier: Z5Ew8jdcaawPsthAmM4R+Jxf8ZOhIe3OK0/wFhb+8ns= Subject key identifier: F7:6A:38:BF:E7:4A:8C:D1:F0:88:F9:38:86:91:E4:59:71:81:44:2F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB6FDFD3ACB9964E16310 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b6:fd:fd:3a:cb:99:64:e1:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=94a2f13e-6fb9-40c0-b790-30a7fb1fc61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:58:01:93:24:87:06:63:e5:d5:42:0a:77: 0e:48:04:3d:33:5b:02:b2:c4:e2:71:41:75:00:4f: 52:30:4a:a7:1d:c9:b1:e7:5f:94:e7:7a:7c:de:7f: 7c:1b:cf:0e:45:fe:96:98:6a:01:46:c3:dc:b5:df: 52:7f:03:88:99:94:9c:c1:e8:72:6e:ec:e6:99:bb: 32:2d:d9:af:5e:66:f6:76:f0:fc:65:d5:b2:1d:63: 5a:0a:79:2b:06:ac:31:fc:6b:69:ca:f2:d7:6a:47: 68:0e:c9:29:34:13:43:63:4e:d1:e2:f6:ba:8e:ef: 30:7d:e4:4d:85:1a:31:e9:cf:8f:01:c8:01:1a:ed: 33:55:79:e4:19:c4:ee:6b:45:4a:8c:b5:1d:b9:14: b5:67:a4:ed:81:db:e1:3d:fe:f3:c4:1b:77:fe:3d: 11:3a:14:3e:ab:b4:fc:bc:dd:c2:7d:36:40:7e:07: 26:4d:45:15:b9:7a:8b:4d:84:b7:75:ad:04:3a:e3: bd:21:74:8f:38:2d:17:de:f8:9b:0f:ad:81:ca:db: dd:c2:f8:a0:ad:74:65:dc:4c:a1:91:2d:63:7d:3c: d6:85:a8:0a:b4:e4:68:1e:cc:5c:0f:dd:a5:86:a2: bc:f7:47:78:79:6c:7c:77:32:21:92:00:1c:a7:5c: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6A:38:BF:E7:4A:8C:D1:F0:88:F9:38:86:91:E4:59:71:81:44:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:db:8e:fc:d8:75:d8:73:3a:e4:1b:07:45:a3:64:1b:f6:7e: aa:2e:7e:94:a8:06:cf:70:53:2f:cc:a3:6b:12:ce:24:2a:01: d0:04:f6:51:88:f9:73:b8:28:51:8b:8d:57:0e:df:0c:54:ce: a7:f1:9f:6b:04:0b:d8:fc:ed:82:e1:ed:15:86:9e:58:58:80: f1:07:7a:78:4a:bc:f5:f1:d9:fa:d2:95:75:41:93:0b:95:f7: fd:75:c6:2f:a7:c4:b4:74:3c:a7:c1:1a:77:e1:6a:a1:29:87: f5:34:a3:db:56:2d:f1:4a:cf:b7:53:cb:02:7a:78:2a:13:5a: cc:47:2f:7f:bf:de:21:12:15:e2:7e:e6:36:e0:0b:7b:3b:66: b7:b2:99:e2:10:c0:5e:4f:2f:fd:93:97:a8:99:35:cc:b1:f0: 5e:93:16:46:10:d3:da:a4:34:37:64:51:d8:aa:5b:83:c8:cb: db:51:30:e7:67:1a:f5:9f:ac:85:7f:5c:49:46:c9:cb:a2:f4: 12:58:c3:66:b7:dd:c9:ed:5a:ff:70:f6:03:79:95:06:30:26: a6:0e:9c:25:a2:67:62:d2:0c:24:f2:f4:ff:84:7e:95:53:21: e8:4f:20:c4:43:82:aa:81:4e:58:08:01:ba:c6:86:5c:40:b0: 43:93:67:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7b9/TrLmWThYxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OTRhMmYxM2UtNmZiOS00MGMwLWI3OTAtMzBhN2ZiMWZjNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA861YAZMkhwZj5dVCCncOSAQ9M1sCssTicUF1 AE9SMEqnHcmx51+U53p83n98G88ORf6WmGoBRsPctd9SfwOImZScwehybuzmmbsy LdmvXmb2dvD8ZdWyHWNaCnkrBqwx/GtpyvLXakdoDskpNBNDY07R4va6ju8wfeRN hRox6c+PAcgBGu0zVXnkGcTua0VKjLUduRS1Z6TtgdvhPf7zxBt3/j0ROhQ+q7T8 vN3CfTZAfgcmTUUVuXqLTYS3da0EOuO9IXSPOC0X3vibD62BytvdwvigrXRl3Eyh kS1jfTzWhagKtORoHsxcD92lhqK890d4eWx8dzIhkgAcp1w7DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdqOL/nSozR8Ij5OIaR5FlxgUQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWEyNWQ3YjEtZThiOS0z MzVmLTlhMmMtOWEzYmYzZGFjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvbjvzYddhzOuQbB0WjZBv2fqoufpSoBs9wUy/Mo2sSziQqAdAE9lGI +XO4KFGLjVcO3wxUzqfxn2sEC9j87YLh7RWGnlhYgPEHenhKvPXx2frSlXVBkwuV 9/11xi+nxLR0PKfBGnfhaqEph/U0o9tWLfFKz7dTywJ6eCoTWsxHL3+/3iESFeJ+ 5jbgC3s7ZreymeIQwF5PL/2Tl6iZNcyx8F6TFkYQ09qkNDdkUdiqW4PIy9tRMOdn GvWfrIV/XElGycui9BJYw2a33cntWv9w9gN5lQYwJqYOnCWiZ2LSDCTy9P+EfpVT IehPIMRDgqqBTlgIAbrGhlxAsEOTZ3g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:00 2025 by rpki-client